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(54) Control content transmission method and storage-based broadcasting system 



(57) In a storage-based broadcasting system (1 00) 
that automatically updates a viewer and provides a user 
interface (B) unique to a service (S), a transmitting 
apparatus (110) transmits a control content (Cb) for 
realizing the user interface (B) as entire or part of a con- 

Fig. 1 



tent A receiving apparatus (30) receives and activates 
the transmitted control content (Cb) for executing the 
user interface. 
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Description 

BACKGROUND OF THE INVENTION 

Field of the Invention s 

[0001] The present invention relates to information 
service systems for automatically providing a user with 
a presenter required for viewing desired contents with a 
viewer regardless of the presence or absence of a w 
user's request and, more specifically, to a storage- 
based broadcasting system that automatically updates 
the viewer. 

Description of the Background Art 15 

[0002] Information service systems for providing 
users with a service for viewing contents require a 
browser for supplying the content data to a presenter to 
make them available to the user. This browser must be 20 
appropriately updated depending on factors attributed 
to content data to be provided, a transmission channel 
used for providing the content data to the user, and the 
presenter on the user's side. 

[0003] As one example of conventional information 2s 
service systems, a push-type information distribution 
service using a computer over the Internet has been 
realized by, for example, PointCast Network (registered 
trademark) of PointCast Incorporated, and Active Desk- 
top (registered trademark) of Microsoft Corporation. so 
[0004] In such push-type information distribution 
service, contents such as news and weather forecast 
that are broadcast from a broadcast station over the 
Internet are received by and stored in a receiver such as 
a personal computer. A user operates the receiver to 35 
activate a browser, which is a user interface for viewing 
contents. Thus, the user can view the contents stored in 
the receiver. 

[0005] Different browsers are used for different 
services. Consequently, a flexible user interface can be 40 
achieved for each service, if the browser needs to be 
updated, the user receives a new browser by using a 
function programmed directly on the current browser 
itself. Then, the current browser is replaced with the 
received new browser. In this way, the browser can be 45 
updated. 

[0006] With reference to FIGS. 24, 25, 26, 27, 28, 
29, and 30, one example of the conventional broadcast- 
ing system is now described. As shown in a block dia- 
gram of FIG. 24, a broadcasting system 2500 includes a so 
transmitting apparatus 2510, a delivery system 120, 
and a receiving apparatus 2520. The transmitting appa- 
ratus 2510 includes browser storages 2511, browser 
pitchers 2513, content storages 1113, content pitchers 
251 4, a multiplexer 115, and a transmitter 116. 55 
[0007] There are two or more browser storages 
2511, browser pitchers 2513, content storages 1113, 
and content pitchers 251 4 provided. Each of these com- 



ponents is given a symbol with a suffix (lower-case 
alphabet) added thereto. Hereinafter, the same compo- 
nents are each given the same symbol with a different 
suffix added thereto for identification. 
[0008] In the example of FIG. 24, three browser 
storages 2511 are provided: browser storages 2511a, 
251 1 b, and 251 1 c; three browser pitchers 251 3 are pro- 
vided: browser pitchers 2513a, 2513b, and 2513c; three 
content storages 1 1 13 are provided: contents storages 
1113a, 1113b, and 1113c; and three content pitchers 
2514 are provided: content pitchers 2514a, 2514b, and 
2514c. Note that, if each of the same components 
needs not specifically to be identified, they are generally 
referred to as the browser storages 251 1, the browser 
pitchers 2513, the content storages 1113, the content 
pitchers 2514, respectively 

[0009] In this specification, if there are a plurality of 
the same components as describe above, they are iden- 
tified by adding a suffix to each symbol. Furthermore, if 
each of them needs not specifically to be identified, they 
are generally referred to without a suffix added to the 
symbol. 

[001 0] In FIGS. 25, 26, 27 and 28, data stored in the 
browser storages 251 3, the content storages 251 3, the 
storage 133, and the memory 138 in the above broad- 
casting system 2500 are shown. The three browser 
storages 2511a, 2511b, and 2511c are independently 
and respectively provided for three service (S1 , S2, and 
S3). The browser pitchers 2513 each store a browser B 
that corresponds to a service (S) to be provided to a 
user, and send the browser B to the multiplexer 115 
according to a predetermined schedule. 
[0011] The browser pitcher 2513a for the service 
S1 stores a browser B(S1). The browser B is a compu- 
ter program written in native code (machine language) 
of a CPU (Central Processing Unit) in the receiving 
apparatus 2520. Similarly, the browser 2513b for the 
service S2 stores a browser B(S2), and the browser 
2513c for the service S3 stores a browser B(S3). Note 
that if each of them needs not specifically to be identi- 
fied, they are simply referred to as the browser B. 
[0012] A specific browser transmission technique 
such as a communication protocol and transmission 
schedule is defined for each service. Thus, processes 
carried out by the browser pitchers 2513 vary among 
the services. For this reason, the browser pitchers 
2513a, 2513b, 251 3n (n is an arbitrary natural 
number) are independently and respectively provided 
for the services. 

[0013] In the example shown in FIG. 24, the three 
browser pitchers 2513a, 2513b, and 2513c are inde- 
pendently provided for the three services S1, S2, and 
S3, respectively. The content storage 1113 stores a 
content C of the corresponding service. The content 
storage 1113 is provided for each service. In FIG. 25, 
the three content storages 1113a, 1113b, and 1113c 
are independently provided for the three service, 
respectively. 
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[0014] In the example shown in FIG. 25, the content 
storage 1113a for the service S1 stores two service 
contents C(S1, 1) and C(S1, 2). The content storage 
1 1 13b for the service S2 does not store any content C. 
The content storage 1113c for the service S3 stores 5 
three service contents C(S3, 1), C(S3, 2), and C(S3, 3). 
Note that if each of the contents needs not specifically 
to be identified, the content is simply referred to as the 
service content C. 

[0015] Referring back to FIG. 24, the content 10 
pitcher 2514 sends the content C(Sm, O) stored in the 
content storage 1113 of the corresponding service to 
the multiplexer 115 in a predetermined manner. In the 
content C(Sm, O), Sm represents a service S with a suf- 
fix m (m is an arbitrary natural number) for identification, 15 
and O (O is an arbitrary natural number) represents an 
ordinal number of a plurality of contents C that form the 
service Sm. 

[0016] As such, in the transmitting apparatus 2510 
used for the conventional broadcasting system 2500, 20 
methods for transmitting browsers and contents vary 
among services. Therefore, the plurality of browser 
pitchers 251 3 and content pitchers 2514 have to be indi- 
vidually provided for the services. Moreover, different 
transmission methods should be respectively prepared 25 
for the browser B and the content C. Therefore, the plu- 
rality of pitchers have to be individually provided for the 
browser B and the content C. 

[0017] The multiplexer 115 multiplexes and modu- 
lates the browser B received from the browser pitcher 30 
2513 and the service content C (Sm, O) received from 
the content pitcher 1 13 to output a digital bit stream. 
The multiplexer 115 may be structured by a multiplexer 
and a modulator in a station system for digital broad- 
casting. 35 
[0018] The transmitter 116 sends data processed 
by the multiplexer 1 15 to the delivery system 120. The 
transmitter 116 may be implemented by a modem if the 
delivery system is structured by a wired communica- 
tions circuit, or may be implemented by a parabolic 40 
antenna for transmission if structured by a broadcasting 
communications satellite in space. 
[0019] The delivery system 120 is now described. 
The delivery system 120 is a means for transmitting 
information, such as contents and browsers sent from 45 
the transmitting apparatus 2510, to the receiving appa- 
ratus 2520. For example, the delivery system 120 may 
be structured by an optical fiber or cables of various 
types; a broadcasting communications satellite in 
space; or a package medium such as a DVD and its dis- so 
tribution channels. 

[0020] The receiving apparatus 2520 is now 
described in detail. The receiving apparatus 2520 
includes a receiver 131, a de-multiplexer 132, a storage 
133, a tenderer 134, a presenter 135, an input device 55 
136, a CPU 137, and memory 138. 
[0021] The receiver 131 revives information such 
as the content C and the browser B through the delivery 



system 120 to output a digital bit stream. The receiver 
131 maybe implemented by a modem, or a module 
including an antenna and a tuner that are used in gen- 
eral digital broadcasting receivers. 

[0022] The de-multiplexer 1 32 demodulates the dig- 
ital bit stream received from the receiver 131 , and sepa- 
rates the multiplexed information. That is, the de- 
multiplexer 132 carries out the process carried out by 
the multiplexer 115 of the transmitting apparatus 2510 
in the reverse direction. An output from the de-multi- 
plexer 132 is provided to the storage 133 and can be 
read by the CPU 137. 

[0023] The storage 133 stores the browsers and 
contents provided by the de-multiplexer 132. The stor- 
age 133 is implemented by, for example, a randomly- 
accessible recording medium such as a hard disk. Infor- 
mation stored in the storage 133 is readable and 
changeable by the CPU 137. 

[0024] As illustrated in FIG. 26, the storage 133 
stores the three browsers B(S1), B(S2), and B(S3), and 
five contents C(S1 , 1 ), C(S1 , 2), C(S3 f 1), C(S3, 2), and 
C(S3,3). 

[0025] The renderer 1 34, by following an instruction 
from the CPU 137, renders graphics for displaying on- 
screen display (OSD) on a screen. 
[0026] The presenter 1 35 presents an output of the 
renderer 134 as viewable for the user. The presenter 
1 35 may be implemented by a CRT display, for example. 
[0027] The input device 1 36 is operated by the user 
to instruct the receiving apparatus 2520. The input 
device 136 may be implemented by a combination of a 
remote controller and its photoreceptor, a keyboard, a 
mouse, or others. 

[0028] The CPU 1 37, which is a central processing 
un'rt, & interconnected to each component of the receiv- 
ing apparatus 2520. By executing a computer program 
stored in the memory 138, the CPU 137 controls the 
entire receiving apparatus 2520. 
[0029] The memory 138 is constructed of a writa- 
ble/unwritable semiconductor memory RAM/ROM. The 
memory 138 is used for storing data processed by the 
CPU 137 and for storing a computer program and data 
to be executed in the CPU 137. As illustrated in FIG. 27, 
the memory 1 38 stores a browser list 2700, and a com- 
puter program 2651 written in native code (machine lan- 
guage) executable by the CPU 137. 
[0030] With reference to FIG. 28, the browser list 
2700 is now described. The browser list 2700 indicates 
information in a tabular form with rows for the services. 
The browser list 2700 includes a column 2710 for 
browser file names and a column 2520 for service 
names. With the use of the browser list 2700, the 
browser can be specified for a desired service from 
among information stored in the storage 133. 
[0031 ] With reference to a flow chart in FIG. 29, the 
main operation of the receiving apparatus 2520 is now 
described in detail. 

[0032] In step S2801, all service names (2720) of 



5 



EP1 094 403 A1 



6 



the browser list 2700 stored in the memory 138 are dis- 
played on the screen in list form. Such screen display is 
carried out by the renderer 134. 

[0033] In step S2802, the user operates the input 
device 136 to select one of the services in the list dis- s 
played instep S2801. 

[0034] In step S2803, for the service selected in 
step S2802, the file name B(Sm) stored in the storage 
133 is obtained by referring to the browser-file-name 
column in the browser list 2700. w 
[0035] In step S2804, the file B(Sm) specified in 
step S2803 is executed. The browser is written in native 
code of the CPU 137, and therefore can be executed 
directly by the CPU 137. 

[0036] With reference to a flow chart in FIG. 30, a is 
browser updating process by the receiving apparatus 
2520 is now described. 

[0037] In step S2301 , the CPU 1 37 starts executing 
the currently-transmitted browser B. 
[0038] In step S2902, the browser B is received by 20 
the receiver 131 and then the de-multiplexer 132, and 
its version is checked. 

[0039] In step S2903, if the browser B received in 
step S2902 is a new version of the currently-executed 
browser B, the procedure goes to a next step S2904, 25 
and if not, the procedure ends. 
[0040] In step S2904, the receiver apparatus 2520 
receives the currently-transmitted browser B, and the 
storage 133 temporarily stores the received browser B 
as a file. so 
[0041] In step S2905, the currently-executed 
browser B is replaced with the temporarily-stored file. 
Then, by rebooting the browser B, the received browser 
of the new version starts to be executed. 
[0042] In the above example of the conventional 35 
broadcasting system, the browser written in native code 
of the computer is transmitted by using a method unique 
to each service. Therefore, various browser transmis- 
sion methods specific to services have to be incorpo- 
rated in both transmitting and receiving apparatuses. 40 
[0043] That is, in the transmitting apparatus, vari- 
ous browser pitchers specific to services are required. 
In the receiving apparatus, a function is programmed, 
typically in the browser code for each service, for receiv- 
ing a new browser for a new service and replacing the 45 
existing browser with the received new browser. 
[0044] To realize substantially the same function for 
each service, the browsers each should be imple- 
mented in slightly different specification. 
[0045] Therefore, as the number of services so 
increases, various needlessness occurs. That is, in the 
receiving apparatus, a plurality of similar program codes 
have to be held, thereby wasting the storage capacity. 
Also, similar processes are simultaneously activated in 
the receiving apparatus, and therefore computer 55 
resources cannot be efficiently used. 
[0046] Furthermore, browser transmission methods 
vary among the services, and are programmed only in 



the browsers. Therefore, the user suffers inconvenience 
of manually obtaining the browser in advance by activat- 
ing a file communications protocol such as ftp. 

[0047] Still further, there are various differences 
between the browser and the content in transmission 
method. Therefore, in a case where a plurality of serv- 
ices are subscribed, transmission of one service may 
interfere with transmission of another browser or serv- 
ice. 

[0048] Also in the transmitting apparatus, slightly 
different browser pitchers are required as many as the 
services in order to achieve browser transmission, 
which is essentially the same function to any service. 
Therefore, the transmitting apparatus becomes more 
complicated in structure linearly as the number of serv- 
ices increases. This complicated structure causes an 
increase in development cost and inconvenience in 
management. 

[0049] Furthermore, these browser pitchers have 
no relation to one another. These browser pitchers may 
transmit browsers more than the delivery system can 
handle, causing an overflow. The content pitchers are 
also independent of one another for each service, and 
therefore the same problem may occur. 

SUMMARY OF THE INVENTION 

[0050] An object of the present invention is to pro- 
vide a method and system for providing a flexible user 
interface for services in storage-based broadcasting in 
which service structured by a plurality of contents trans- 
mitted in digital broadcasting or a computer network, 
while securing services from invalid or unauthorized 
contents. 

[0051] The present invention has the following fea- 
tures to solve the problem above. 
[0052] A first aspect of the present invention is 
directed to a storage-based broadcasting system that 
supplies a user interface unique to a service composed 
of a content stored therein for presenting the service, 
the service comprising: 

a transmission unit for transmitting a control content 
for realizing the user interface as entire or part of 
the content; and 

a receiving unit for receiving and activating the 
transmitted control content to execute the user 
interface, wherein 

the user interface is transmitted and received 
as a content 

[0053] According to a second aspect, in the first 
aspect, 

the control content is a browser for the stored con- 
tent 
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[0054] According to a third aspect, in the first 
aspect, 

the transmitting apparatus comprises: 

5 

content pitcher means for pitching the content 
including the control content; and 
a service property transmitting unit for transmit- 
ting service property information indicating the 
service, and w 



the receiving unit comprises a control content 
determination unit for determining, based on the 
received content and service property information, 
the control content among the received contents. 



[0055] According to a fourth 
aspect, 



aspect, in the third 



15 



20 



25 



30 



35 



the content pitcher unit comprises a content 
assembler unit for adding, to the content, a content 
header defining the content, and 
the receiving unit further determines the control 
content among the received contents based on the 
content header of the received content 

[0056] According to a fifth aspect, in the third 
aspect, 

the transmitting unit further comprises an electronic 
signature unit for placing an electronic signature on 
the control content, and the service property trans- 
mitting unit transmits a public key of the electronic 
signature as being included in the service property 
information, and 

the receiving unit further comprises a signature 
authentication unit for authenticating the electronic 
signature by a public key included in the received 
service property information, and the control con- 
tent is determined through authentication of the 
electronic signature. 

[0057] According to a sixth aspect, in the fifth 
aspect, 

the authentication of the electronic signature is per- 
formed using a key unique to the service. 



[0058] According to a seventh aspect, in the third 
aspect, so 

the content pitcher unit further comprises a content 
ID space management unit for sending information 
for defining part of ID space of the content, and 
the receiving unit further comprises a designation ss 
unit for designating the control content based on 
the content ID included in the part of ID space. 



40 



45 



[0059] An eighth aspect of the present invention is 
directed to, in a storage-based broadcasting system 
that supplies a user interface unique to a service (S) 
composed of a content (C) stored therein for presenting 
the service, a control content transmission method for 
providing a user interface unique to each of the serv- 
ices, the method comprising: 

a step of transmitting a control content for realizing 
the user interface as entire or part of the content; 
and 

a step of receiving and activating the transmitted 
control content to execute the user interface. 

[0060] According to a ninth aspect, in the eighth 
aspect, 

the control content is a browser for the stored con- 
tent 

[0061] According to a tenth aspect, in the eighth 
aspect, 

the transmitting step comprises: 

a step of pitching the content including the con- 
trol content; and 

a step of transmitting service property informa- 
tion indicating the service, and 

the receiving step comprises a step of determining 
the control content among the received contents 
based on the received content and service property 
information. 

• ■ 

[0062] According to an eleventh aspect, in the tenth 
aspect, 

the content sending step comprises a step of add- 
ing, to the content, a content header defining the 
content, and 

the receiving step further comprises a step of deter- 
mining, based on the content header of the 
received content, the control content among the 
received contents. 

[0063] According to a twelfth aspect, in the tenth 
aspect, 

the transmitting step comprises a step for placing 
an electronic signature on the control content, 
the service property transmitting step further com- 
prises a step of transmitting a public key of the elec- 
tronic signature as being included in the service 
property information, and 
the receiving step further comprises: 

a step of authenticating the electronic signature 
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by a public key included in the received service 
property information; and 

a step of determining the control content through 
authentication of the electronic signature. s 

[0064] According to a thirteenth aspect, in the 
twelfth aspect, 

the authentication of the electronic signature is per- w 
formed using a key unique to the service. 

[0065] According to a fourteenth aspect, in the 
tenth aspect, 

is 

the content pitching step further comprises a step 
of sending information for defining part of ID space 
of the content, and 

the receiving step further comprises a step of deter- 
mining the control content based on the content ID 20 
included in the part of ID space. 

[0066] These and other objects, features, aspects 
and advantages of the present invention will become 
more apparent from the following detailed description of 25 
the present invention when taken in conjunction with the 
accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0067] 

FIG. 1 is a block diagram showing the structure of a 
storage-based broadcasting system according a 
first embodiment of the present invention; 
FIG. 2 is a diagram for explaining service property 
information stored in a service property storage 
shown in FIG. 1; 

FIG. 3 is a diagram schematically showing one 
example of a content body stored in a content body 
storage of FIG. 1; 

FIG. 4 is a diagram in assistance of explaining the 
service property information in the storage-based 
broadcasting system shown in FIG. 1; 
FIG. 5 is a diagram in assistance of explaining a 45 
service content in the storage-based broadcasting 
system shown in FIG. 1 ; 

FIG. 6 is a diagram in assistance of explaining a 
browser content in the storage-based broadcasting 
system shown in FIG. 1 ; so 
FIG. 7 is a diagram schematically showing one 
example of contents stored in a storage shown in 
FIG. 1; 

FIG. 8 is a diagram schematically showing informa- 
tion stored in memory shown in FIG. 1 ; 55 
FIG. 9 is a flow chart showing the operation to exe- 
cute the browser content by a receiving apparatus 
shown in FIG. 1; 



FIG. 10 is a flow chart showing the operation to 
update the browser content by the receiving appa- 
ratus shown in FIG. 1 ; 

FIG. 1 1 is a block diagram showing the structure of 
a storage-based broadcasting system according to 
a second embodiment of the present invention; 
FIG. 12 is a diagram in assistance of explaining 
service property information in the storage-based 
broadcasting system shown in FIG. 1 1 ; 
FIG. 13 is a diagram in assistance of explaining a 
browser content in the storage-based broadcasting 
system shown in FIG. 1 1 ; 

FIG. 1 4 is a flow chart showing the operation to exe- 
cute the browser content by a receiving apparatus 
shown in FIG. 11; 

FIG. 15 is a block diagram showing the structure of 
a storage-based broadcasting system according to 
a third embodiment of the present invention; 
FIG. 16 is a diagram in assistance of explaining 
service property information in the storage-based 
broadcasting system shown in FIG. 15; 
FIG. 17 is a diagram in assistance of explaining a 
browser content in the storage-based broadcasting 
system shown in RG. 15; 

FIG. 1 8 is a flow chart showing the operation to exe- 
cute the browser content by the receiving appara- 
tus shown in FIG. 15; 

RG. 1 9 is a block diagram showing the structure of 
a storage-based broadcasting system according to 
a fourth embodiment of the present invention; 
RG. 20 is a diagram in assistance of explaining 
service property information in the storage-based 
broadcasting system shown in FIG. 19; 
RG. 21 is a diagram in assistance of explaining a 
content ID in the storage-based broadcasting sys- 
tem shown in FIG. 19; 

RG. 22 is a diagram in assistance of explaining a 
browser content in the storage-based broadcasting 
system shown in RG. 1 9; 

RG. 23 is a flow chart showing the operation to exe- 
cute the browser content by a receiving apparatus 
shown in FIG. 19; 

RG. 24 is a block diagram showing the structure of 
a conventional storage-based broadcasting sys- 
tem; 

RG. 25 is a diagram schematically showing one 
example of contents stored in content storages and 
browser storages shown in FIG. 24; 
FIG. 26 is a diagram schematically showing one 
example of contents and browsers stored in a stor- 
age shown in FIG. 24; 

RG. 27 is a diagram schematically showing infor- 
mation stored in memory shown in RG. 24; 
RG. 28 is a diagram in assistance of explaining 
service property information in the storage-based 
broadcasting system shown in FIG. 24; and 
RG. 29 is a flow chart showing the operation to exe- 
cute the browser by a receiving apparatus shown in 
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FIG. 24; and 

FIG. 30 is a flow chart showing the operation to 
update the browser by the receiving apparatus 
shown in FIG. 24. 

5 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

(First embodiment) 

10 

[0068] With reference to FIGS. 1 , 2, 3, 4, 5, 6, 7, 8, 
9, and 10, a storage-based broadcasting system 
according to a first embodiment of the present invention 
is described. 

[0069] As shown in FIG. 1 , a storage-based broad- is 
casting system 100 according to the first embodiment 
includes a transmitting apparatus 110, a delivery sys- 
tem 120, and a receiving apparatus 130. 
[0070] The transmitting apparatus 110 includes a 
service property storage 111, a content assembler 112, 20 
content body storages 1 13, a content body pitcher 114, 
a multiplexer 1 15, and a transmitter 116. There are two 
or more content body storages 113 provided. Each of 
these components is given a symbol with a suffix (lower- 
case alphabet) added thereto for identification. Simi- 25 
(arty, hereinafter in the specification, the same compo- 
nents are each given a symbol with a suffix for 
identification. If each of the same components needs 
not specifically to be identified, they are generally 
referred to with the symbol only and no suffix, such as 30 
the content body storages 113. 
[0071 ] Each content body storage 113 stores a con- 
tent body Dc, which is substance data of each service. 
Each content body storage 113 provides the content 
body Dc to the content body pitcher 114. as 
[0072] The content body pitcher 114 sends, or 
pitches, the provided content body Dc to the content 
assembler 112. 

[0073] The content assembler 112 produces a con- 
tent header He and the like with reference to service 40 
property information stored in the service property stor- 
age 111. Then, the content assembler 112 assembles 
the received content body Dc, the content header He, 
and the like into a content C. The content body Dc is 
composed of management information of the content 45 
body Dc including header information to generate a 
content C. This generated, or assembled, content C is 
provided to the multiplexer 115. 
[0074] The multiplexer 1 15 multiplexes the service 
property information Isp received from the service prop- so 
erty storage 111 and the content C received from the 
content assembler 112. The multiplexer 115 then pro- 
vides the multiplexed information to the transmitter 116. 
[0075] The transmitter 116 modulates the multi- 
plexed service property information Isp and the content 55 
C into a digital bit stream in a form suitable to the deliv- 
ery system, and then outputs the modulated information 
to the delivery system 120. The transmitter 116 may be 
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implemented by a modem if the delivery system is struc- 
tured by a wired communications circuit, or may be 
implemented by a parabolic antenna for transmission if 
structured by a broadcasting communications satellite 
in space. 

[0076] The delivery system 120 is a means for 
transmitting information such as a content C and a 
browser B sent from the transmitting apparatus 110 to 
the receiving apparatus 130. For example, the delivery 
system 120 may be structured by an optical fiber or 
cables of various types; a broadcasting communica- 
tions satellite in space; or a package medium such as a 
DVD and its distribution channels. 
[0077] The receiving apparatus 130 includes a 
receiver 1 31 , a de-multiplexer 1 32, a storage 133, a ren- 
derer 134, a presenter 135, an input device 136, a CPU 
137, and memory 138. Note that the storage 133, the 
renderer 134, the input device 136, the CPU 137, and 
the memory 138 are connected to one another through 
a data bus. 

[0078] The receiver 1 31 receives the content C and 
the browser B through the delivery system 120, and out- 
puts a digital bit stream. The receiver 1 31 may be imple- 
mented by a communications modem, a cable modem, 
a mobile communications module such as Bluetooth, or 
a module including an antenna and a tuner that are 
used in general digital broadcasting receivers. 
[0079] The de-multiplexer 132 demodulates the dig- 
ital bit stream received from the receiver 1 31 , and sepa- 
rates the multiplexed information. That is, the de- 
multiplexer 132 carries out the process carried out by 
the multiplexer 1 15 of the transmitting apparatus 1 10 in 
the reverse direction. An output from the de-muttiplexer 

132 is provided to the storage 133 and can be read by 
the CPU 137. 

[0080] The storage 1 33 is, for example, a randomly- 
accessible recording medium such as a hard disk, and 
readable and changeable by the CPU 137. The storage 

133 stores a service content C(Sm, O) and a browser 
content (Sm, Bflg) received from the de-muttiplexer 132. 
The service content C(Sm, O) is a service substance 
such as a broadcast program or data provided by the 
storage-based broadcasting system 100 and viewed 
with enjoyment or used by users. The browser content 
C(Sm, Bflg) realizes a user interface for the user to 
enjoy and use the provided service on the receiving 
apparatus 130. The browser content C(Sm, Bflg) is con- 
trol code executable under a program code execution 
environment provided by the receiving apparatus 130, 
and targets the service content C(Sm, O) for process- 
ing. 

[0081 ] The renderer 1 34, by following an instruction 
from the CPU 137, renders graphics for displaying on- 
screen display (OSD) on a screen. 
[0082] The presenter 1 35 presents an output of the 
renderer 134 as viewable for the user. The presenter 
1 35 may be implemented by a CRT display, for example. 
[0083] The input device 1 36 is operated by the user 
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to instruct the receiving apparatus 1 30. The input device 
136 may be implemented by a combination of a remote 
controller and its photoreceptor, a keyboard, a mouse, 
or other components. 

[0084] The CPU 137, which is a central processing s 
unit, is interconnected to each component of the receiv- 
ing apparatus 130. By executing a computer program 
stored in the memory 138, the CPU 137 controls the 
entire receiving apparatus 130. 

[0085] The memory 138 is constructed of a writa- 10 
ble/unwrrtable semiconductor memory RAM/ROM. The 
memory 138 is used for storing data processed by the 
CPU 137 and for storing a computer program and data 
to be executed in the CPU 137. 

[0086] In FIGS. 2, 3, 4 and 5, the states of data 15 
stored in each component of the storage-based broad- 
casting system 1 00 are shown. 
[0087] As shown in FIG. 2, the service property 
storage 1 1 1 is provided for storing the service property 
information Isp indicating a property of each service to 20 
be provided by the storage-based broadcasting system 
100. 

[0088] As shown in FIG. 3, the content body stor- 
age 1 13 stores a content body Dc, which is a substance 
of the content C composing each corresponding serv- 25 
ice. The content body storage 1 13 is provided for each 
service. That is, three content body storages 113a, 
1 13b, and 1 13c are independently provided for three dif- 
ference service. The content body storage 1 13a corre- 
sponds to a service S1 , storing two content body Dc(S1 , 30 
1 ) and Dc(S1 , 2) and one browser content body Dc(S1 , 
Bflg). An arbitrary content body Dc is hereinafter repre- 
sented as a content body Dc(Sm, O), where a symbol S 
with a suffix m (m is an arbitrary natural number) indi- 
cates each service for identification, and a parameter O 35 
(O is an arbitrary natural number) indicates an ordinal 
position of the content body in the contents C that com- 
pose a service Sm. The browser content body Dc(S1 , 
Bflg) is generated from a browser B(S1) for the service 
S1 in the same format as the content body Dc, and can 40 
be generally referred to as a browser content body 
Dc(Sm, Bflg), like the service content body Dc(Sm, O). 
[0089] On the other hand, unlike the service con- 
tent body Dc(Sm, O), the browser content body Dc(Sm, 
Bflg) includes a parameter Bflg indicating the service 45 
property information Isp, instead of the parameter O. 
The service property information Isp will be described 
later referring to FIG. 4. However, the browser content 
body Dc(Sm, Bflg) are the same in data format as the 
service content body Dc(Sm, O). Therefore, the content so 
body storage 113 cannot discriminate therebetween, 
and handles both as the content body Dc. In this mean- 
ing, the browser content body Dc(Sm, Bflg) and the 
service content body Dc(Sm, O) are collectively referred 
to the content body Da 55 
[0090] Hereinafter, for simplification, the service 
content body Dc(Sm, O) is abbreviated as a service 
content body DcS, and the browser content body 
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Dc(Sm, Bflg) is as a browser content body DcB, as 
required. Furthermore, the browser content C(Sm, Bflg) 
composed of the browser content body Dc(Sm, Bflg) is 
abbreviated as a browser content Cb, and the service 
content C(Sm, O) composed of the service content 
body Dc(Sm, O) as a service content Cs. 

[0091] With reference to FIG. 4, 5, and 6, the serv- 
ice content Cs and the browser content Cb outputted 
from the content assembler 1 12 are described in detail. 
In FIG. 4, the service property information Isp stored in 
the service property storage 111 is exemplarity shown. 
The service property information Isp relates to all serv- 
ices (S1 , S2, S3, Sm) to be provided by the storage- 
based broadcasting system 100. In a table shown in 
FIG. 3, each row corresponds to each service, and is 
composed of a service ID and service name. 
[0092] For example, in the first row, a service with 
its service ID "S1 * and service name Today's News" is 
shown. Similarly, a service with its service ID "S2" and 
service name "Useful Information" is shown in the sec- 
ond row, and a service with its service ID "S3* and serv- 
ice name "New Car Guide* in the third row. The service 
ID is unique to each service in the service property 
information Isp, and can be used for identifying each 
service. 

[0093] In FIG. 5, the data structure of the service 
content Cs is schematically shown. In FIG. 6, the data 
structure of the browser content Cb is schematically 
shown. The content C is structured of the content body 
Dc, which is data of the content C itself, and the content 
header He, which is meta data accompanying the con- 
tent body Dc. 

[0094] In FIG. 5, the service content body DcS of 
the content C(S1 , 1 ) of the service content Cs is related 
to the content header HcS. In FIG. 6, the browser con- 
tent body DcB of the content C(S1 , Bflg) of the browser 
content Cb Is related to the content header HcB. 
[0095] The content header He (HcS and HcB) are 
represented in tabular form taking a set of an item and a 
value as one row. The content header HcS includes four 
rows: the service ID, content ID, content version, and 
content name. 

[0096] The service ID corresponds to the service ID 
of the service property information Isp illustrated in FIG. 
4. The service ID identifies the service S to which the 
content C corresponds. In the present example, the 
service ID is *S1 ", and therefore indicates that the con- 
tent C is the service Today's News* as shown in FIG. 4. 
[0097] The content ID is used for identifying the 
content C itself. Thus, each content ID takes a unique 
value in the storage-based broadcasting system 100. 
[0098] The content version is provided for indicating 
whether the version of the content C is older or newer 
compared with other content C. Each content ID has a 
value of the content version independently of one 
another. When the content Cc currently stored in the 
storage 1 33 (as will be described later with reference to 
FIG. 7 is replaced with the new content Cn for updates, 



8 



15 



EP1 094 403 A1 



16 



a content version larger in number than the current con- 
tent Cc is provided to the new content Cn. 
[0099] The content name is an item for the user to 
select as a character string. In the present example, the 
content name indicates that the content body Dc is 
"Weather Forecast". 

[0100] The above-stated service ID, content ID, 
content version, and content name are included in both 
of the service content header HcS and the browser con- 
tent header HcB. 

[0101] However, as shown in FIG. 6, the browser 
content header HcB of the browser content Cb further 
includes a row indicating a browser content flag. 
[0102] The browser content flag is an item for indi- 
cating that the content C is the browser content Cb, and 
is equivalent to Bflg as stated above. The browser con- 
tent flag in the browser content header HcB is True, 
thereby indicating that the content body Dc is the 
browser content body DcB. 

[0103] In the browser content Cb as shown in FIG. 
6, the service ID is "S1", and the content ID is "101". 
That indicates that the browser content Cb for the serv- 
ice Today's News" is composed of the content body Dc 
with the content ID "101". In other words, at least three 
items, that is, the service ID, content ID, and browser 
content flag, are required to define the content C as the 
browser content Cb. 

[01 04] The process carried out by the service prop- 
erty storage 111, the content assembler 112, the con- 
tent body storages 113, and the content body pitcher 
114 is described below based on the data structure of 
the content C as described above. 
[0105] The content body pitcher 114 sends, or 
pitches, the content bodies Dc successively and repeat- 
edly provided by the content body storages 1 13 to the 
content assembler 112. The content assembler 112 
adds a content header (HcS, HcB) to the content body 
Dc (DCS, DcB) to generate the content C (Cs, Cb) for 
output to the multiplexer 115. 

[0106] With reference to FIGS. 7 and 8, description 
is now made of data form in which the content C (serv- 
ice content Cs, browser content Cb) transmitted from 
the transmitting apparatus 110 through the delivery sys- 
tem 120 is stored in each component of the receiving 
apparatus 130. 

[01 07] The transmitting apparatus 110 sends to the 
delivery system 1 20 a digital bit stream composed of the 
content C and the service property information Isp. The 
digital bit stream is first received by the receiver 131 of 
the receiving apparatus 130, and then provided to the 
de-multiplexer 132. 

[0108] The de-multiplexer 1 32 demodulates the dig- 
ital bit stream into the content C and the service prop- 
erty information Isp for reproduction. The de-multiplexer 
132 further extracts the content header He from the 
reproduced the content C, and outputs the extracted 
content header He and the service property information 
Isp to the bus. 



[01 09] On the other hand, the reproduced content C 
is temporarily held in the de-multiplexer 132. For dis- 
criminating between the reproduced content C and the 
content C already stored in the storage 133, the former 
5 is hereinafter referred to as a demodulated content Cn, 
and the latter is as a stored content Cc. 

[0110] The storage 133 receives, in predetermined 
timing, the content C reproduced by the de-multiplexer 
132, and stores the received the content C therein. As 

10 shown in FIG. 7, the contents C (Cs, Cb) for the serv- 
ices outputted from the content assembler 112 to the 
multiplexer 1 15 are stored in the storage 133. 
[0111] That is, eight contents produced of eight 
content bodies in the content body storage 1 13a, 1 13b 

is and 113c are stored in the storage 133. Specifically 
speaking, the content C(S1, Bflg) is produced of the 
content body Dc(S1, Bflg), the content C(S1, 1) is pro- 
duced of the content body Dc(S1, 1), the content C(S1 , 
2) of the content body Dc(S1 , 2); the content C(S2, Bflg) 

20 of the content body Dc(S2, Bflg); and the content C(S3, 
Bflg) of the content body Dc(S3, Bflg), the content C(S3, 
1) of the content body Dc(S3, 1), the content C (S3, 2) 
of the content body Dc(S3, 2), and the content C(S3, 3) 
of the content body Dc(S3, 3) are stored in the storage 

25 133. 

[0112] The storage 133 also sends various data, 
typified by the content body Dc included in the stored 
content C, to the bus and the renderer 134 under the 
control of the CPU 137. 
ao [0113] The renderer 134 generates, based on the 
received information, a video signal for rendering an 
image on the presenter 135. 

[0114] As shown in FIG. 8, the memory 138 stores 
the service property information Isp, a browser content 
35 executer 271 , and a computer program 2351, which is 
native code for the CPU 1 37. The browser content exe- 
cuter 271 is to execute the content as a high-level lan- 
guage computer program. 

[0115] With reference to a flow chart shown in FIG. 
40 9, the operation, of activating the browser content Cb 
included in the content C received by the receiving 
apparatus 130 is described. 

[0116] In step S501 , the service names of the serv- 
ices described in the service property information Isp 

45 outputted from the de-multiplexer 1 32 are presented in 
list form on a display of the presenter 1 35. 
[0117] In step S502, the user operates the input 
device 136 to select one of the services by referring to 
the service name list displayed in step S501 . Based on 

so the selection by the user through the input device 136 
and the service name list, the service selected by the 
user is determined. 

[0118] In step S503, the service ID that corre- 
sponds to the service determined in step S502 is 
55 obtained based on the service property information Isp. 
[0119] In step S504, all contents C stored in the 
storage 133 are searched for the content Cb having the 
same service ID as that obtained in step S503 and 
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whose browser content flag is True. 

[0120] In step S505, the browser content Cb found 
in step S504 is provided to the browser content executer 
271 for execution. 

[0121 ] As such, the browser content flag is provided s 
to the content header HcB of the browser content Cb. 
With the browser content flag, the browser content Cb 
and other service content Cs can be discriminated. Fur- 
thermore, once each service S is specified, the browser 
content Cb (C(Sm, Bflg)) corresponding thereto can be w 
activated as a browser. 

[0122] With reference to a flow chart shown in FIG. 
10, the operation of storing and updating the content by 
the receiving apparatus 130 is now described. 
[0123] In step S601, the content Cn (Cb, Cs), the is 
service property information Isp, and the content 
header He (HcB, HcS) are reproduced by the de-multi- 
plexer 132. 

[0124] In step S6Q2, the content header He repro- 
duced in step S601 is outputted to the bus. 20 
[0125] In step S603, the storage 133 is searched for 
the current content Cc that corresponds to the repro- 
duced content header He for selection. That, among all 
contents C stored in the storage 133, the current con- 
tent Cc having the same content ID as that described in zs 
the reproduced content header He is selected. 
[0126] In step S604, if it is determined in step S603 
that there is no such current content Cc having the 
same content ID in the storage 133, the procedure goes 
to step S605. 30 
[0127] In step S605, the demodulated new content 
Cn is outputted to the storage 133, and newly stored 
therein. The procedure then returns to step S601 . 
[0128] On the other hand, in step S604, if it is deter- 
mined in step S604 that there is any current content Cc as 
having the same content ID in the storage 133, the pro- 
cedure goes to step S606. 

[0129] In step S606, based on the reproduced con- 
tent header He, the new content Cn held in the de-mul- 
tiplexer 132 is compared, in content version, with the 40 
current content Cc found in step S603. If the demodu- 
lated new content Cn is newer than the current content 
Cc, the procedure goes to step S607. 
[0130] In step S607, the current content Cc stored 
in the storage 133 is replaced with the new content Cn 45 
held in the de-multiplexer 132. With this replacement, 
the current content Cc is updated to the new content 
Cn. At the time when the update is completed, the new 
content Cn is dealt with as "current content Cc". Then, 
the procedure returns to step S601 . 50 
[0131] On the other hand, if it is determined in step 
S606 that the demodulated new content Cn is not newer 
than the current content Cc stored in the storage 133, 
the step of updating the content C (step S601) is 
skipped, and the procedure returns to step S601 . 55 
[0132] As described above, in the storage-based 
broadcasting system 100, the transmitting apparatus 
110 sends the browser content Cb for providing a user 



403 A1 18 

interface with each service Sm as the whole or part of 
the contents C composing each service Sm. Then, the 
receiving apparatus 130 receives the transmitted con- 
tent C, and activates the browser content Cb included in 
the received content C to execute the user interface. 

[0133] The process of updating the content C is car- 
ried out irrespectively of the type of the content C, that 
is, the service content Cs or the browser content Cb. 
This updating function is not for a specific service, but 
for all services in common. Therefore, only with this con- 
tent-updating function being achieved, the service con- 
tents Cs and the browser contents Cb for all services 
can be updated and stored in the receiving apparatus 
130. 

[0134] In other words, in this embodiment, the 
browser content Cb, which is a user interface with a 
service, is sent as part of the content Therefore, an 
additional function for transmitting the user interface for 
the service is not required. Also, updating the content 
also can make the user interface updated. 

(Second embodiment) 

[0135] With reference to FIGS. 1 1 , 12, 13, and 14, a 
storage-based broadcasting system according to a sec- 
ond embodiment of the present invention is described 
below. As shown in RG. 11, similarly to the storage- 
based broadcasting system 1 00 shown in FIG. 1 , a stor- 
age-based broadcasting system 700 according to this 
embodiment includes a transmitting apparatus 710, a 
delivery system 120, and a receiving apparatus 730. 
[01 36] The transmitting apparatus 71 0 is the same 
in structure as the transmitting apparatus 110 of the 
storage-based broadcasting system 100 with a signa- 
ture generator 71 1 added thereto. The receiving appa- 
ratus 730 is the same in structure as the receiving 
apparatus 130 with a KP extractor 740, an Sg extractor 
741 , and a decryptor 721 added thereto. Therefore, only 
the unique features of the storage-based broadcasting 
system 700 are described below. 
[0137] The signature generator 711 manages keys 
for electronic signature and also places an electronic 
signature (digital signature) to the browser content Cb. 
For electronic signature, a public key encryption tech- 
nique is used. In this technique, a set of a secret key 
and a public key are generated in an information pro- 
vider. Only the public key is given to an information user, 
and the secret key is held secret. Using the given secret 
key, the information provider places an electronic signa- 
ture on information to be provided (the information with 
the electronic signature takes a form of a set of original 
information and the electronic signature). Using the 
information wfth the electronic signature and the public 
key received from the signature, the user can authenti- 
cate that the received information is the one with the 
electronic signature placed by the information provider 
having the secret key. 

[0138] Here, the signature generator 711 holds a 
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secret key and a public key for each service. The signa- 
ture generator 71 1 places an electronic signature on the 
browser content Cb of the service using the secret key 
for the service. That is, the signature generator 71 1 is 
connected to each of the content storages 11 3a, 11 3b, 5 
and 1 13c. Based on the services of the content bodies 
Dc received therefrom, the signature generator 71 1 out- 
puts a public key KP varied among the services to the 
service property storage 111. 

[01 39] Specifically, as shown in FIG. 1 3, a signature w 
item is added to the content header HcB of the browser 
content Cb. Thus, the electronic signature is stored in 
the browser content Cb. That is, the content header of 
the browser content Cbc(S1 , Bsgn) includes a row for 
electronic signature. Stored in the "Value" column corre- is 
spending to the "Signature" row is information that 
resulted from the electronic signature placed on the cor- 
responding content body Dc with a secret key for the 
service of the content. 

[0140] Hereinafter, the content header HcB with the 20 
electric signature added thereto is referred to as a con- 
tent header HcBc. The browser content having the "Sig- 
nature" item is referred to as a browser content Cbc for 
discrimination from other browser contents Cb, and also 
represented as C(Sm, Bsgn). 25 
[0141 ] The service property storage 111 generates 
service property information Ispc including the public 
keys KP, and outputs the generated information to the 
multiplexer 115. In FIG. 12, the structure of the gener- 
ated service property information Ispc is shown. The 30 
service property information Ispc is given a column for 
storing a value of the public keys KP. One pubic key is 
stored for each of the services S1 , S2, and S3. 
[0142] The signature generator 71 1 generates and 
outputs an electronic signature Sg to the content as 
assembler 112. Based on the content body Dc provided 
by the content body pitcher 114 and the electronic sig- 
nature Sg provided by the signature generator 71 1 , the 
content assembler 112 generates the browser content 
Cbc with the signature. The content assembler 112 then 40 
outputs the browser content Cbc and the service con- 
tent Cs collectively as the content C to the multiplexer 
115. 

[01 43] The receiving apparatus 730 reproduces the 
content C (Cs and Cbc), the content header He (HcS, 45 
HcBc), and the service property information Ispc from a 
digital bit stream received by the de-multiplexer 132. 
The content C (Cs, HcBc) is held in the de-multiplexer 
132. The content header He (HcS, HcBc) is outputted to 
the bus and the Sg extractor 741 . The service property so 
information Ispc is outputted to the KP extractor 740. 
[0144] The Sg extractor 741 extracts the electronic 
signature Sg from the content header HcBc of the repro- 
duced browser content C(Sm v Bsgn), and outputs the 
extracted signature Sg to the bus, ss 
[0145] The KP extractor 740 extracts the public key 
KP from the service property information Ispc, and out- 
puts the extracted public key KP to the bus. 
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[0146] The decryptor 721 authenticates the elec- 
tronic signature in the content header HcBc based on 
the public key KP provided through the bus. 

[0147] As stated above, in the receiving apparatus 
730, the browser content Cbc can be authenticated by 
the electronic signature Sg of the received browser con- 
tent Cbc and the public key KP in the service property 
information Ispc. In other words, it can be ensured that 
the browser content Cbc has been encrypted with the 
secret key unique to the service by a service content 
creator. 

[0148] The operation of the receiving apparatus 
720 according to this embodiment is now described. 
With reference to a flow chart shown in FIG. 14, the 
process of activating the browser content Cb by the 
receiving apparatus 730 in the storage-based broad- 
casting system 700 is described. 
[0149] Here, the process in steps S501c, S502, 
S503c and S504 is basically the same as that in step 
S501, S502, S503, and S504 in the above-stated 
receiving apparatus 130 except that the service prop- 
erty information Isp is replaced with the service property 
information Ispc and that the content C to be processed 
is replaced with the browser content Cbc Therefore, 
description of the same process is omitted herein. 
[0150] In step S1001, the "Signature" row of the 
content header of the extracted browser content Cbc is 
referred to. If the signature row is not available, that is, if 
the browser content Cbc with signature is abnormal, the 
procedure goes to step S1 004. 
[0151] In step S1004, a warning that the browser 
content Cbc with signature is abnormal is displayed, 
and the procedure ends. 

[0152] On the other hand, if the signature row is 
available, the procedure goes to step S1 002. 
[0153] In step S1002, it is authenticated whether 
the electronic signature Sg in the browser content Cbc 
is placed with the secret key that corresponds to the 
public key KP. The public key KP for use in this authen- 
tication is obtained by selecting the row corresponding 
to the service from the service property information 
Ispc. 

[0154] In step S1003, if it is determined in step 
S1002 that the electronic signature Sg is not appropri- 
ate, the procedure goes to step S1004. 
[0155] In step S505c. the browser content Cbc with 
an appropriate electronic signature is executed by the 
browser content executor. Then, the procedure ends. 
[0156] In step S1004, a warning that browser con- 
tent Cb is invalid because it has no signature or errone- 
ous one is given. Then, the procedure ends. 
[01 57] As stated above, in the second embodiment, 
with the electronic signature technique, only the person 
who owns the public key to a target service can send 
the browser content Cb executable in the receiving 
apparatus 720. 

[0158] Therefore, if a person who does not own the 
public key for the target service stores any content in the 
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content body storage, the erroneous browser content 
Cb can be prevented from being intentionally sent and 
executed in the receiving apparatus 730. Moreover, the 
browser content Cb with an electronic signature with a 
secret key for another service can be prohibited from 5 
being executed as the browser content Cb for the target 
service. 

[0159] In this embodiment, the electronic signature 
is placed only on the content body. However, the content 
header may be included in the content body to carry the 10 
electronic signature. 

[0160] Note that a simple electronic signature tech- 
nique without using public key encryption may be used. 
For example, one secret key for each service is created, 
and stored in the receiving apparatus in a predeter- 15 
mined manner. Then, information indicative of the 
browser content Cb is encrypted with the secret key for 
each service and decrypted in the receiving apparatus 
side with the secret key, thereby determining the 
browser content Cb. 20 
[01 61 ] As stated above, in this embodiment, the sig- 
nature generator 71 1 places an electronic signature on 
the browser content Cbc which provides a user inter- 
face with the service. The content body storages 113 
each send the content body Dc including the browser 25 
content body DcBc. The service property storage 111 
sends the public key KP for the electronic signature Sg 
as the service property information Ispc for all services 
in common. The receiving apparatus 730 authenticates 
the electronic signal Sg to determine that the content C 30 
is the browser content Cbc. With these components 
provided to the storage-based broadcasting system 
700, reliability of the content C distributed therein can 
be ensured. 

[0162] That is, in this embodiment, the electronic 35 
signature technique is used for designating the browser 
content Cb among a plurality of contents C composing 
a single service. The key for use in electronic signature 
is provided for each service provider. Thus, the browser 
content Cb for the service cannot be designated by any- 40 
one other than the service provider. Consequently, the 
browser content Cb is prevented from being willfully 
designated by anyone other than the service provider 
without proper authorization. 

45 

(Third embodiment) 

[0163] With reference to FIGS. 15, 16, 17, and 18, a 
storage-based broadcasting system according to a third 
embodiment of the present invention is now described, so 
As shown in FIG. 15, a storage-based broadcasting 
system 1000 according to this embodiment includes a 
transmitting apparatus 1010, a delivery system 120, 
and a receiving apparatus 130, as in the storage-based 
broadcasting system 1 00 shown in FIG. 1 . The transmit- 55 
ting apparatus 1010 is similar in structure to the trans- 
mitting apparatus 1 1 0 of the storage-type broadcasting 
system 100 except that the content assembler 112 of 
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the transmitting apparatus 110 in the storage-based 
broadcasting system 100 is replaced with a content 
assembler 1 12i. Therefore, the same features as those 
of the storage-based broadcasting system 100 are not 
described herein, and only the features unique to the 
storage-type broadcasting system 1000 is mainly 
described below. 

[0164] The content assembler 112i has the same 
functions as those of the content assembler 112 and 
also has other functions as follows. That is, the content 
assembler 112i designates a browser content Cbi 
among the plurality of content bodies Dc stored in the 
content body storages 1 13a, 1 13b, and 1 13c. The con- 
tent assembler 1 1 2i then extracts the content ID and the 
content version of the designated content (browser con- 
tent Cbi) as browser designation information Bid. The 
content assembler 11 2i then outputs the extracted 
browser designation information Bid to the service prop- 
erty storage 111. 

[0165] Based on the browser designation informa- 
tion Bid, the service property storage 111 writes the 
content ID and content version of the browser content 
Cb in the service property information Isp, as shown in 
FIG. 1 6. That is, service property information Ispi has a 
browser content designator composed of the content ID 
and the content version. One browser content designa- 
tor is provided for each service. Therefore, the browser 
content Cb (Cbi) can be discriminated from other con- 
tents. As such, the service property information Isp with 
the content ID and content version of the browser con- 
tent Cbi written therein is referred to as the service 
property information Ispi for identification. 
[0166] Designation of the browser content Cbi is 
made not by the browser content flag of a content 
header HcBi, but by the content assembler 1 12i select- 
ing the content. 

[0167] In FIG. 1 7, one example of a content header 
HcBi is shown. Designation of the browser content Cbi 
is not made by the browser content flag Bflg. Therefore, 
the content header HcBi does not include a row for the 
browser content flag Bflg. Moreover, in the content 
header, the service content Cs and the browser content 
Cb cannot be discriminated from each other. In the 
example shown, a human-readable character string in a 
"content name" row seems to make it possible to recog- 
nize whether the content is the browser content Cb or 
not However, in the level of the transmitting apparatus 
1 01 0 and the receiving apparatus 1 30, such recognition 
cannot be made. 

[0168] As such, in the storage-based broadcasting 
system 1000, the receiving apparatus 130 is identical in 
structure to its counterpart of the storage-based broad- 
casting system 100, but is slightly different in operation 
because of different program code and data stored 
therein. 

[0169] With reference to a flow chart shown in FIG. 
1 8, the process of activating the browser content Cbi by 
the receiving apparatus 130 is now described. The 
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process in steps S501 i, S502, and S505i is basically the 
same as that in step S501, S502, and S505 described 
with reference to FIG. 9 except that the service property 
information Isp is replaced with the service property 
information Ispi and that the target content C is replaced 5 
with the browser content Cbi. Therefore, description of 
the above process is not made herein. 

[0170] In step S1401, by referring to the service 
property information Ispi, the browser content designa- 
tor of the determined service is extracted. 10 
[0171] In step S1402, the storage 133 is searched 
for the content C (browser content Cbi) with the content 
ID and content version of the browser content designa- 
tor extracted in step St 401. Then, the found content C 
is designated as the browser content Cbi. 15 
[0172] Designation of the browser content Cbi is 
carried out by the content assembler 1 12i. Therefore, if 
the content assembler 1 12 is managed property, redun- 
dant designation of the browser content Cbi or errone- 
ous designation of other service content C as the 20 
browser content Cbi can be prevented. 
[0173] As stated above, in this embodiment, the 
content body pitcher 114 sends the bodies of the 
browser contents Cbi that each provide a user interface 
with a service. The service property storage 111 sends, 25 
as the browser content designator used for all services 
in common, the browser designation information Bid for 
designating the browser content body DCb among a 
plurality of contents as being included in the service 
property information Ispi The receiving apparatus 130 x 
determines, based on the browser content designator, 
that the content C is the browser content Cbi. With 
these components provided, the storage-based broad- 
casting system 100 ensuring discrimination between 
the browser content Cb and the service content Cs can 35 
be achieved. 

[0174] In other words, in the third embodiment, the 
browser content Cb is designated by the control content 
designator used for the plurality of services in common. 
Then, the designation information of the browser con- 40 
tent Cb is separated from the content and content 
header. Thus, willful designation of the browser content 
Cb for another service can be prevented irrespectively 
of the information stored in the content body storage. 
For example, the designation information of the browser 45 
content Cb may be managed under control of a contract 
broadcasting company instead of each service provider 
so as to prevent designation of an authorized browser 
content Cb among the service providers. 

so 

(Fourth embodiment) 

[0175] With reference to FIGS. 19, 20, 21, 22, and 
23, a storage-based broadcasting system according to 
a fourth embodiment of the present invention is 55 
described. As shown in FIG. 19, a storage-based broad- 
casting system 1500 according to this embodiment 
includes, a transmitting apparatus 1510, a delivery sys- 
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tern 120, and a receiving apparatus 130, as in the stor- 
age-based broadcasting system 100 shown in FIG. 1. 
The transmitting apparatus 1 51 0 is identical in structure 
to the transmitting apparatus 1 1 0 of the storage-based 
broadcasting system 100 except that a content ID 
space manager 1581 is additionally provided. 

[0176] The same features as those in the storage- 
based broadcasting system 100 are not described 
herein, and only the features unique to the storage- 
based broadcasting system 1500 are described below. 
[0177] The content ID space manager 1501 man- 
ages a range (space) of values that can be taken by the 
content ID of the content for the service to designate the 
browser content Cbs. 

[0178] The content ID space is defined in a prede- 
termined manner. For example, the content IDs 100 to 
199 indicate the content of the service ID °S1"; 200 to 
299 indicate the content of the service ID a S2"; and 300 
to 399 indicate the content of the service ID "S3"; and 0 
to 99 indicate the browser content Cb (Cbc). 
[0179] The content ID space manager 1501 gener- 
ates content space definition CSD for outputtirtg to the 
content assembler 112. Based on the content space 
definition CSD, the content assembler 112 rewrites the 
values of the content IDs stored in the content headers 
He (HcBs) for the content bodies Dc (DcBs) provided 
from the content storages 113a, 113b, and 113c via the 
content body pitcher 114. Thus, values of the content 
IDs are replaced with those according to the defined 
content ID space. 

[0180] In FIG. 21, one example of the content 
space definition is shown. The content space definition 
CSD includes a column for the range of the content ID 
and information for defining the content space. In this 
example, contents for the services are created with their 
content IDs arbitrary set within the range of 0 to 99, and 
stored in each content body storage. For the service SI , 
the browser content Cbs generated from the content 
body Dc provided by the content body storage 113a is 
outputted if its content ID is between 0 and 99. At this 
time, if not between 0 and 99, the browser content Cbs 
is assumed to be unauthorized, and then excluded. 
[0181] On the other hand, for the service content Cs 
for the service S1 , 1 00 is added to the content ID for the 
conversion thereof within 100 to 199. After conversion, 
it is checked whether the content ID is within 100 and 
199. If within this range, the service content Cs Is out- 
putted and, if not, the service content Cs is assumed to 
be unauthorized, and then excluded. 
[01 82] At conversion, the content ID for reference of 
other content embedded in the content is also con- 
verted in a similar manner. 

[0183] In FIG. 22, the structure of the browser con- 
tent Cbs replaced by the content ID space manager 
1501 is exemplarily shown. In the content header HcBs 
of the browser content Cbs, the content ID is *001 a , 
which Is within 0 to 999 defined as the content ID range 
of the browser content Cb. 
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[0184] The content ID space manager 1501 also 
adds information for defining the content ID space to the 
service property information stored in the service prop- . 
erty storage 111. 

[0185] In FIG. 20, one example of service property 5 
information Isps is shown. The service property infor- 
mation Isps is the same as the service property informa- 
tion Isp according to the first embodiment shown in FIG. 
4. 

[0186] With reference to FIG. 23, the process of 10 
activating the browser content Cos by the receiving 
apparatus 130 is now described. The process in steps 
S501s, S502, S503, and S505s is basically the same as 
that in steps S501, S502, S503, and S505 described 
with reference to FIG. 9 except that the service property is 
information Isp is replaced with the service property 
information Isps and that the target content C is 
replaced with the browser content Cbs. Therefore, 
description of the same process is not made herein. 
[0187] In step S1801, the storage 133 is searched 20 
for the content C having the service ID obtained in step 
S503 and having the content ID within the range of val- 
ues equal to that of the browser content Cbs designated 
by the service property information Isps. 
[0188] In step S505s, the found browser content 25 
Cbs is executed. 

[0189] As stated above, the storage-based broad- 
casting system 1 500 manages the space of the content 
ID. The content having the content ID of a specific value 
defined under this management can be designated as so 
the browser content Cbs. As such, without a specific 
field (column, in this example) provided for the content 
header HcBs, etc., the browser content Cbs can be des- 
ignated. 

[0190] In other words, as long as the content body 35 
Dc can be stored in the content storage 113 only by the 
content provider, the browser content Cb for another 
service can be prevented from being willfully specified 
and executed in the receiving apparatus 130. 
[0191] In the fourth embodiment, if a single content 40 
ID space is provided for all service providers, the range 
of values of the content ID of the browser content Cb is 
defined in advance. Thus, willful designation of the 
browser content Cb among the service providers can be 
prevented. Only the field of the content ID is used, and 45 
a new field is not required to be provided to the content 
header, etc. Therefore, only a slight modification is 
required to the conventional transmitting apparatus. 
Moreover, the content receiving process of the conven- 
tional receiving apparatus can be used easily. so 
[0192] While the invention has been described in 
detail, the foregoing description is in all aspects illustra- 
tive and not restrictive, ft is understood that numerous 
other modifications and variations can be devised with- 
out departing from the scope of the invention. 55 
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Claims 

1. A storage-based broadcasting system (100) that 
supplies a user interface unique to a service (S) 
composed of a content (C) stored therein for pre- 
senting said service, said system (1 00) comprising: 

transmission means (110) for transmitting a 
control content (Cb) for realizing said user 
interface (B) as entire or part of said content 
(C); and 

receiving means (130) for receiving and acti- 
vating said transmitted control content (Cb) to 
execute said user interface (B), wherein 

said user interface (B) is transmitted and 
received as a content (C). 

2. The storage-based broadcasting system (100) as 
claimed in claim 1 , wherein 

said control content (Cb) is a browser (B) for 
said stored content (C). 

3. The storage-based broadcasting system (100) as 
claimed in claim 1, wherein 

said transmitting apparatus (130) comprises: 

content pitcher means (112) for pitching 
the content (C) including said control con- 
tent (Cbc); and 

service property information transmitting 
means (1 1 1) for transmitting service prop- 
erty information (Isp) indicating said serv- 
ice, and 

said receiving means (130) comprises control 
content determination means (S504) for deter- 
mining, based on said received content (C, He) 
and service property information (Isp), said 
control content (Cb) among the received con- 
tents (C). 

4. The storage-based broadcasting system (100) as 
claimed in claim 3, wherein 

said content pitcher means (112) comprises 
content assembler means (112) for adding, to 
said content (C), a content header (He) defin- 
ing the content, and 

said receiving means (130) further determines 
said control content (Cb) among the received 
contents (C) based on the content header (He) 
of said received content (C, He). 

5. The storage-based broadcasting system (700) as 
claimed in claim 3, wherein 
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said transmitting means (710) further com- 
prises electronic signature means (711) for 
placing an electronic signature on said control 
content (Cbc), and said service property trans- 
mitting means (111) transmits a public key (KP) 5 
of said electronic signature (Sg) as being 
included in said service property information 
(Isp), and 

said receiving means (730) further comprises 
signature authentication means (138; S1002) 10 
for authenticating said electronic signature by a 
public key (KP) included in said received serv- 
ice property information (Isp), and said control 
content (Cb) is determined through authentica- 
tion of said electronic signature. 15 11. The 



6. The storage-based broadcasting system (700) as 
claimed in claim 5 t wherein 

the authentication of said electronic signature 
(Sg) is performed using a key unique to said 
service. 

7. The storage-based broadcasting system (1500) as 
claimed in claim 3, wherein 

said content pitcher means (112) further com- 
prises content ID space management means 
for sending information (CSD) for defining part 
of ID space of said content (C), and 
said receiving means (130) further comprises 
designation means (S1801) for designating 
said control content (Cb) based on the content 
ID included in the part of ID space. 

35 

8. In a storage-based broadcasting system (1 00) that 
supplies a user interface unique to a service (S) 
composed of a content (C) stored therein for pre- 
senting said service, a control content transmission 
method for providing a user interface (B) unique to 40 
said service (S), said method comprising: 

a step of transmitting a control content (Cb) for 
realizing said user interface (B) as entire or part 
of said content; and 45 
a step (S501 through S505) of receiving and 
activating said transmitted control content (Cb) 
to execute said interface. 

9. The control content transmission method as so 
claimed in claim 8, wherein 

said control content (Cb) is a browser (B) for 
said stored content (C). 

55 

10. The control content transmission method as 
claimed in claim 8, wherein 
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said transmitting step comprises: 

a step of pitching the content (C) including 
said control content (Cbc); and 
a step of transmitting service property 
information (Isp) indicating said service, 
and 

said receiving step (S501 through S505) com- 
prises a step (S504) of determining said control 
content (Cb) among the received contents (C) 
based on the received content (C, He) and 
service property information (Isp). 

control content transmission method as 
claimed in claim 10, wherein 

said content pitching step comprises a step of 
adding, to said content (C), a content header 
(He) defining the content, and 
said receiving step (130) further comprises a 
step of determining, based on the content 
header (He) of said received content (C, He), 
said control content (Cb) among the received 
contents (C). 

12. The control content transmission method (700) as 
claimed in claim 1 0, wherein 

said transmitting step further comprises a step 
for placing an electronic signature on said con- 
trol content (Cbc), 

said service property transmitting step further 
comprises a step of transmitting a public key 
(KP) of said electronic signature (Sg) as being 
included in said service property information 
(Isp), and 

said receiving step further comprises: 

a step of authenticating said electronic sig- 
nature by a public key (KP) included in said 
received service property information 
(Isp); and 

a step (S1003) of determining said control con- 
tent (Cb) through authentication of said elec- 
tronic signature. 

13. The control content transmission method as 
claimed in claim 12, wherein 

the authentication of said electronic signature 
(Sg) is performed using a key unique to said 
service. 

14. The control content transmission method as 
claimed in claim 10, wherein 
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said content pitching step further comprises a 
step of sending information (CSD) for defining 
part of ID space of said content (C), and 

said receiving step further comprises a step 
(S1801) of determining said control content 5 
(Cb) based on the content ID included in the 
part of ID space. 
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